Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: /c48VP308cY4SCANlB88SWu56NC1d0YUO83GqaHtXYo=
Subject key identifier: 8C:C1:98:58:CD:F9:AF:BA:8B:DF:33:06:04:7C:55:48:DF:BD:15:9C
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 0194BC05257E1436B891672DF9C87D9CA973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: ILseMYDLsKO9as5C/zNyVAkX1qNu7PFbyiSZHAH9Jac=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:7e:14:36:b8:91:67:2d:f9:c8:7d:9c:a9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=8cc19858cdf9afba8bdf3306047c5548dfbd159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:ff:ad:e5:ed:b9:c9:75:01:b9:f7:45:9b:
66:ac:0f:3e:8e:0d:f0:5a:9d:6e:a4:58:a5:97:96:
55:3b:61:41:03:50:46:68:52:43:03:7c:e6:df:57:
b7:87:17:4e:fb:3b:82:73:f4:cd:56:70:0b:25:d4:
48:89:5d:54:da:ed:4d:dd:37:9d:2f:9f:8a:c9:7f:
d9:fd:f9:d6:2b:14:9e:5a:ee:40:5e:e6:77:a9:82:
66:54:66:eb:a9:0e:b4:ed:6f:89:c0:31:d0:e6:46:
a6:dd:0f:2c:57:be:d0:4c:4d:e5:fe:e9:2e:3b:c4:
fb:e1:6a:bb:8a:84:61:53:41:63:9f:ed:fb:b7:f0:
6b:75:34:43:00:26:cb:01:06:04:98:81:a2:34:b9:
b3:e6:7a:16:b7:d2:0d:a5:04:38:a8:dd:13:8f:5a:
fb:f7:4b:13:a4:f5:6e:50:e6:4c:2f:1e:53:8b:2d:
d7:fd:52:fa:b4:9f:92:92:07:c3:fe:e8:14:fe:6d:
9e:62:53:d9:9d:9a:1c:b9:61:e9:4b:06:68:ad:40:
8d:3d:96:29:49:27:f0:f2:b1:69:ca:30:26:b5:3c:
72:a8:b1:04:b4:86:0a:b0:72:c8:f8:59:d8:84:3d:
b9:83:86:46:dc:02:f8:7f:56:98:e7:f0:16:64:3b:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:98:58:CD:F9:AF:BA:8B:DF:33:06:04:7C:55:48:DF:BD:15:9C
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a9:b1:58:da:ec:54:82:ef:d5:09:2e:de:c5:7d:f7:86:2e:
9c:e7:ba:f4:fe:1c:da:b6:d6:e0:89:6c:df:3b:fc:20:e3:e3:
b2:eb:cf:17:0e:9e:fd:52:c2:cb:a1:c1:78:bb:70:4e:7e:10:
88:a8:16:90:ae:68:41:07:e4:58:89:e2:15:c0:f3:a5:5b:99:
c9:9e:c1:5f:8b:0f:1a:6d:0e:dd:90:83:9e:fd:e7:f1:5f:f1:
a2:51:b1:69:39:ce:42:a8:1a:3e:1e:79:89:33:71:7d:6c:0e:
98:4f:e2:70:98:43:1d:c1:40:05:7f:01:62:4e:8e:9a:6e:ca:
40:00:39:b2:20:46:d9:b5:30:59:26:2b:5c:d9:39:d1:75:25:
9e:03:26:7e:bf:82:7f:d9:ec:85:c2:e6:c2:f2:0d:ce:55:d4:
3d:82:5c:1e:78:73:05:ac:dd:1a:28:c7:da:e9:7a:96:59:f5:
77:9f:e9:6e:68:92:cb:4d:85:16:cb:a0:c1:30:4f:d6:60:89:
4c:e1:6b:90:34:5c:31:07:47:35:19:f6:80:12:f1:b1:8a:ef:
2b:5b:59:64:55:5c:c4:a8:92:35:f1:f6:2f:30:0f:6b:13:ba:
dd:39:a5:95:0d:b1:4c:87:1b:32:07:26:1d:64:88:2e:f5:87:
1c:45:47:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:34 2025 by rpki-client